CVE-2025-14952: A vulnerability was detected in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /admin/add_category.php. Performing a manipulation of the argument txtCategory...

Summary

A vulnerability was detected in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /admin/add_category.php. Performing a manipulation of the argument txtCategoryName results in sql injection. The attack is possible to be carried out remotely. The exploit is now pu...

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
campcodes	supplier_management_system	1.0 `cpe:2.3:a:campcodes:supplier_management_system:1.0:::::::*`

Original advisory text

A vulnerability was detected in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /admin/add_category.php. Performing a manipulation of the argument txtCategory...

A vulnerability was detected in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /admin/add_category.php. Performing a manipulation of the argument txtCategoryName results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.

References

https://vuldb.com/?ctiid.337588 Permissions Required VDB Entry
https://vuldb.com/?id.337588 Third Party Advisory VDB Entry
https://vuldb.com/?submit.716440 Third Party Advisory VDB Entry
https://www.campcodes.com/ Product
https://github.com/vivibiubiu/CVE/issues/1 Exploit Third Party Advisory